PHP 5.3.28 is released, the new version is already available in custombuild. Here is changelog: http://www.php.net/ChangeLog-5.php#5.3.28 Here is quote from http://php.net:
The PHP development team announces the immediate availability of PHP 5.3.28. This release fixes two security issues in OpenSSL module in PHP 5.3 - CVE-2013-4073 and CVE-2013-6420. All PHP 5.3 users are encouraged to upgrade to PHP 5.3.28 or latest versions of PHP 5.4 or PHP 5.5.